Add HTTP 499 to transient error codes for model fallback by zeroasterisk · Pull Request #41468 · openclaw/openclaw

zeroasterisk · 2026-03-09T21:56:27Z

Adds 499 (Client Closed Request) to TRANSIENT_HTTP_ERROR_CODES. Anthropic commonly returns this during overload — without it in the set, these errors don't trigger model fallback.

Fixes #41467

greptile-apps · 2026-03-09T22:00:00Z

Greptile Summary

This PR adds HTTP 499 ("Client Closed Request") to TRANSIENT_HTTP_ERROR_CODES, enabling Anthropic's 499 overload responses to trigger model fallback as intended. However, an unrelated personal sandbox Docker Compose file (docker-compose.sandbox.yaml) has been inadvertently included in the PR and contains a hardcoded authentication token.

Key changes:

src/agents/pi-embedded-helpers/errors.ts: Adds 499 to the transient error codes set (line 192). Import ordering for FailoverReason is also cleaned up (moved to line 3).
docker-compose.sandbox.yaml: A new 60-line personal sandbox configuration file that appears unrelated to the fix and should not be merged to main. It also contains a hardcoded authentication token in plain text (line 44).

Recommendation: Remove docker-compose.sandbox.yaml from this PR and add it to .gitignore, or rebase without it. The core error-handling change in errors.ts is correct and safe.

Confidence Score: 2/5

The core error-handling fix is safe, but the unrelated sandbox file with hardcoded secrets should not be merged to main.
The errors.ts change is correct and low-risk. However, the score is reduced significantly because docker-compose.sandbox.yaml — a personal development configuration with a hardcoded authentication token — was inadvertently included in the PR and must be removed before merging.
docker-compose.sandbox.yaml must be removed from this PR or added to .gitignore.

_{Last reviewed commit: c1daf4b}

greptile-apps · 2026-03-09T22:00:03Z

docker-compose.sandbox.yaml

+# Sandbox OpenClaw instance for testing A2A channel experiments
+# Managed by Zaf (main instance)
+#


This file appears to be a personal development configuration specific to "Zaf" and is unrelated to the stated purpose of the PR ("Add HTTP 499 to transient error codes for model fallback"). It references personal host paths (${HOME}/.openclaw/workspace) and should not be merged into the main branch. Personal sandbox setups like this are typically better kept out of version control (e.g., added to .gitignore) rather than committed.

Prompt To Fix With AI

This is a comment left during a code review. Path: docker-compose.sandbox.yaml Line: 1-3 Comment: This file appears to be a personal development configuration specific to "Zaf" and is unrelated to the stated purpose of the PR ("Add HTTP 499 to transient error codes for model fallback"). It references personal host paths (`${HOME}/.openclaw/workspace`) and should not be merged into the main branch. Personal sandbox setups like this are typically better kept out of version control (e.g., added to `.gitignore`) rather than committed. How can I resolve this? If you propose a fix, please make it concise.

greptile-apps · 2026-03-09T22:00:04Z

docker-compose.sandbox.yaml

+            --gemini-api-key $${GOOGLE_API_KEY} \
+            --gateway-port 19789 \
+            --gateway-bind lan \
+            --gateway-auth token \


A static authentication token is hardcoded in plain text on this line. Committing authentication tokens to version control is a security best practice violation — this token is now part of the repository's permanent git history. Source it from an environment variable instead:

--gateway-token ${SANDBOX_GATEWAY_TOKEN}

Prompt To Fix With AI

This is a comment left during a code review. Path: docker-compose.sandbox.yaml Line: 44 Comment: A static authentication token is hardcoded in plain text on this line. Committing authentication tokens to version control is a security best practice violation — this token is now part of the repository's permanent git history. Source it from an environment variable instead: ```yaml --gateway-token ${SANDBOX_GATEWAY_TOKEN} ``` How can I resolve this? If you propose a fix, please make it concise.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c1daf4b8fb

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-03-09T22:00:44Z

docker-compose.sandbox.yaml

+            --gateway-port 19789 \
+            --gateway-bind lan \
+            --gateway-auth token \
+            --gateway-token sandbox-token-zaf-2026


Externalize sandbox gateway token

This compose file hardcodes --gateway-token sandbox-token-zaf-2026 while also exposing the gateway port and binding to LAN, so anyone with network access to the host can authenticate with a publicly known credential. Even for sandbox environments, this creates an avoidable unauthorized-access path; the token should come from an environment variable (or generated secret) instead of being committed.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-03-09T22:00:44Z

docker-compose.sandbox.yaml

+        # First run: initialize if needed
+        if [ ! -f /data/.openclaw/openclaw.json ]; then
+          echo 'Initializing sandbox OpenClaw...'
+          node /app/openclaw.mjs onboard \


Make sandbox compose runnable from a clean checkout

The documented usage suggests docker-compose -f docker-compose.sandbox.yaml up -d is sufficient, but this command path runs node /app/openclaw.mjs directly and that bootstrap requires local build output (dist/entry.(m)js), which is not tracked in git. On a clean clone, the container exits immediately unless users manually build first, so this setup should either build/install dependencies in-container or document/enforce the prerequisite explicitly.

Useful? React with 👍 / 👎.

docker-compose.sandbox.yaml

499 (Client Closed Request) is commonly returned by Anthropic during overload but was missing from TRANSIENT_HTTP_ERROR_CODES, so it didn't trigger model fallback. Fixes openclaw#41467

altaywtf · 2026-03-09T22:55:16Z

Merged via squash.

Prepared head SHA: 0053bae14038e6df9264df364d1c9aa83d5b698e
Merge commit: c9a6c542ef7ae9350fd79e20a7e6642b5ce4d604

Thanks @zeroasterisk!

* main: (33 commits) Exec: mark child command env with OPENCLAW_CLI (openclaw#41411) fix(plugins): expose model auth API to context-engine plugins (openclaw#41090) Add HTTP 499 to transient error codes for model fallback (openclaw#41468) Logging: harden probe suppression for observations (openclaw#41338) fix(discord): apply effective maxLinesPerMessage in live replies (openclaw#40133) build(protocol): regenerate Swift models after pending node work schemas (openclaw#41477) Agents: add fallback error observations (openclaw#41337) acp: harden follow-up reliability and attachments (openclaw#41464) fix(agents): probe single-provider billing cooldowns (openclaw#41422) acp: add regression coverage and smoke-test docs (openclaw#41456) acp: forward attachments into ACP runtime sessions (openclaw#41427) acp: enrich streaming updates for ide clients (openclaw#41442) Sandbox: import STATE_DIR from paths directly (openclaw#41439) acp: restore session context and controls (openclaw#41425) acp: fail honestly in bridge mode (openclaw#41424) Gateway: tighten node pending drain semantics (openclaw#41429) Gateway: add pending node work primitives (openclaw#41409) fix(auth): reset cooldown error counters on expiry to prevent infinite escalation (openclaw#41028) fix(cron): do not misclassify empty/NO_REPLY as interim acknowledgement (openclaw#41401) iOS: reconnect gateway on foreground return (openclaw#41384) ...

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf (cherry picked from commit c9a6c54)

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

@altaywtf

) Merged via squash. Prepared head SHA: 0053bae Co-authored-by: zeroasterisk <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf

) (cherry picked from commit c9a6c54)

openclaw-barnacle bot added agents Agent runtime and tooling size: S labels Mar 9, 2026

greptile-apps bot reviewed Mar 9, 2026

View reviewed changes

chatgpt-codex-connector bot reviewed Mar 9, 2026

View reviewed changes

altaywtf reviewed Mar 9, 2026

View reviewed changes

docker-compose.sandbox.yaml Outdated Show resolved Hide resolved

zeroasterisk force-pushed the fix/transient-499-504 branch from c1daf4b to e20073b Compare March 9, 2026 22:35

openclaw-barnacle bot added size: XS and removed size: S labels Mar 9, 2026

altaywtf self-assigned this Mar 9, 2026

altaywtf mentioned this pull request Mar 9, 2026

fix(fallback): treat http 499 as transient #41482

Closed

Zaf (via OpenClaw) and others added 3 commits March 10, 2026 01:49

Add HTTP 499 to transient error codes for model fallback

f40d2e3

499 (Client Closed Request) is commonly returned by Anthropic during overload but was missing from TRANSIENT_HTTP_ERROR_CODES, so it didn't trigger model fallback. Fixes openclaw#41467

Agents: classify HTTP 499 failover status

686619b

Agents: note HTTP 499 fallback fix

0053bae

altaywtf force-pushed the fix/transient-499-504 branch from 69f4c8b to 0053bae Compare March 9, 2026 22:54

altaywtf merged commit c9a6c54 into openclaw:main Mar 9, 2026
25 of 26 checks passed

github-actions bot mentioned this pull request Mar 10, 2026

📡 Upstream Digest — 2026-03-10 01:16 UTC curtismercier/openclaw-mods#224

Open

gemini-code-assist bot mentioned this pull request Mar 10, 2026

Sync/upstream 2026 03 10 QVerisAI/QVerisBot#102

Merged

alexey-pelykh mentioned this pull request Mar 10, 2026

Cherry-pick: Tool re-exposure under restrictive profiles, skill download roots remoteclaw/remoteclaw#922

Closed

4 tasks

alexey-pelykh pushed a commit to remoteclaw/remoteclaw that referenced this pull request Mar 22, 2026

Add HTTP 499 to transient error codes for model fallback (openclaw#41468

dda43a7

) (cherry picked from commit c9a6c54)

alexey-pelykh pushed a commit to remoteclaw/remoteclaw that referenced this pull request Mar 22, 2026

Add HTTP 499 to transient error codes for model fallback (openclaw#41468

c39ddf8

) (cherry picked from commit c9a6c54)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add HTTP 499 to transient error codes for model fallback#41468

Add HTTP 499 to transient error codes for model fallback#41468
altaywtf merged 3 commits intoopenclaw:mainfrom
zeroasterisk:fix/transient-499-504

zeroasterisk commented Mar 9, 2026

Uh oh!

greptile-apps bot commented Mar 9, 2026

Uh oh!

greptile-apps bot Mar 9, 2026

Uh oh!

greptile-apps bot Mar 9, 2026

Uh oh!

chatgpt-codex-connector bot left a comment

Uh oh!

chatgpt-codex-connector bot Mar 9, 2026

Uh oh!

chatgpt-codex-connector bot Mar 9, 2026

Uh oh!

Uh oh!

Uh oh!

altaywtf commented Mar 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

zeroasterisk commented Mar 9, 2026

Uh oh!

greptile-apps bot commented Mar 9, 2026

Greptile Summary

Confidence Score: 2/5

Uh oh!

greptile-apps bot Mar 9, 2026

Choose a reason for hiding this comment

Uh oh!

greptile-apps bot Mar 9, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector bot Mar 9, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector bot Mar 9, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

altaywtf commented Mar 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants